HashiCorp HashiCorp Certifications VA-002-P Questions & Answers

• Question 1:

  From the code below, identify the implicit dependency:

  1.

  resource "aws_eip" "public_ip" {

  2.

  vpc = true

  3.

  instance = aws_instance.web_server.id

  4.

  }

  5.

  resource "aws_instance" "web_server" {

  6.

  ami = "ami-2757f631"

  7.

  instance_type = "t2.micro"

  8.

  depends_on = [aws_s3_bucket.company_data]

  9.

  }

  A. The EC2 instance labeled web_server

  B. The EIP with an id of ami-2757f631

  C. The AMI used for the EC2 instance

  D. The S3 bucket labeled company_data

  Correct Answer: A

  The EC2 instance labeled web_server is the implicit dependency as the aws_eip cannot be created until the aws_instance labeled web_server has been provisioned and the id is available. Note that aws_s3_bucket.example is an explicit dependency.

• Question 2:

  Which statements best describes what the local variable assignment is doing in the following code snippet:

  1.

  variable "subnet_details" {

  2.

  type = list(object({

  3.

  cidr = string

  4.

  subnet_name = string

  5.

  route_table_name = string

  6.

  aznum = number

  7.

  }))

  8.

  }

  9.

  locals {

  10.

  route_tables_all = distinct([for s in var.subnet_details : s.route_table_name ])

  11.

  }

  A. Create a distinct list of route table name objects

  B. Create a map of route table names to subnet names

  C. Create a map of route table names from a list of subnet names

  D. Create a list of route table names eliminating duplicates

  Correct Answer: D

  route_tables_all is assigned a list of unique route table names filtered from a list of objects describing subnet details, one of those object attributes being route_table_name.

• Question 3:

  Environment variables can be used to set variables. The environment variables must be in the format "____"_. Select the correct prefix string from the following list.

  A. TF_VAR

  B. TF_VAR_NAME

  C. TF_ENV

  D. TF_ENV_VAR

  Correct Answer: A

  Environment variables can be used to set variables. The environment variables must be in the format TF_VAR_name and this will be checked last for a value. For example: export TF_VAR_region=us-west-1 export TF_VAR_ami=ami-049d8641 export TF_VAR_alist='[1,2,3]' export TF_VAR_amap='{ foo = "bar", baz = "qux" }' https://www.terraform.io/docs/commands/environment-variables.html

• Question 4:

  Anyone can publish and share modules on the Terraform Public Module Registry, and meeting the requirements for publishing a module is extremely easy. Select from the following list all valid requirements. (select three)

  A. The registry uses tags to identify module versions. Release tag names must be for the format x.y.z, and can optionally be prefixed with a v.

  B. Module repositories must use this three-part name format, terraform--.

  C. The module must be PCI/HIPPA compliant.

  D. The module must be on GitHub and must be a public repo

  Correct Answer: ABD

  The list below contains all the requirements for publishing a module. Meeting the requirements for publishing a module is extremely easy. The list may appear long only to ensure we're detailed, but adhering to the requirements should happen naturally. GitHub. The module must be on GitHub and must be a public repo. This is only a requirement for the public registry. If you're using a private registry, you may ignore this requirement. Named terraform-. Module repositories must use this three-part name format, where reflects the type of infrastructure the module manages, and is the main provider where it creates that infrastructure. The segment can contain additional hyphens. Examples: terraformgoogle-vault or terraform-aws-ec2-instance. Repository description. The GitHub repository description is used to populate the short description of the module. This should be a simple one-sentence description of the module. Standard module structure. The module must adhere to the standard module structure. This allows the registry to inspect your module and generate documentation, track resource usage, parse submodules and examples, and more.

  x.y.z tags for releases. The registry uses tags to identify module versions. Release tag names must be a semantic version, which can optionally be prefixed with a v. For example, v1.0.4 and 0.9.2. To publish a module initially, at least one release tag must be present. Tags that don't look like version numbers are ignored. https://www.terraform.io/docs/registry/modules/publish.html#requirements

• Question 5:

  What is the result of the following terraform function call? lookup({a="hello", b="goodbye"}, "c", "what?")

  A. goodbye

  B. hello

  C. what?

  D. c

  Correct Answer: C

  lookup retrieves the value of a single element from a map, given its key. If the given key does not exist, the given default value is returned instead. In this case, the function call is searching for the key "c". But since there is no key "c", the default vault "what?" is returned. https://www.terraform.io/docs/configuration/ functions/lookup.html

• Question 6:

  Which of the following statements best describes the Terraform list(...) type?

  A. a collection of unique values that do not have any secondary identifiers or ordering.

  B. a collection of values where each is identified by a string label.

  C. a sequence of values identified by consecutive whole numbers starting with zero.

  D. a collection of named attributes that each have their own type.

  Correct Answer: C

  A terraform list is a sequence of values identified by consecutive whole numbers starting with zero. https:// www.terraform.io/docs/configuration/types.html#structural-types

• Question 7:

  True or False?

  terraform init cannot automatically download Community providers.

  A. False

  B. True

  Correct Answer: B

  Anyone can develop and distribute their own Terraform providers. (See Writing Custom Providers for more about provider development.) These third-party providers must be manually installed, since terraform init cannot automatically download them. https://www.terraform.io/docs/configuration/providers.html#third-party-plugins

• Question 8:

  True or False? Each Terraform workspace uses its own state file to manage the infrastructure associated with that particular workspace.

  A. False

  B. True

  Correct Answer: B

  The persistent data stored in the backend belongs to a workspace. Initially, the backend has only one workspace, called "default", and thus there is only one Terraform state associated with that configuration.

• Question 9:

  While Terraform is generally written using the HashiCorp Configuration Language (HCL), what another syntax can Terraform be expressed in?

  A. JSON

  B. XML

  C. TypeScript

  D. YAML

  Correct Answer: A

  The constructs in the Terraform language can also be expressed in JSON syntax, which is harder for humans to read and edit but easier to generate and parse programmatically.

• Question 10:

  When using constraint expressions to signify a version of a provider, which of the following are valid provider versions that satisfy the expression found in the following code snippet: (select two)

  1.

  terraform {

  2.

  required_providers {

  3.

  aws = "~> 1.2.0"

  4.

  }

  5.

  }

  A. 1.2.9

  B. 1.3.1

  C. 1.3.0

  D. 1.2.3

  Correct Answer: AD

  ~> 1.2.0 will match any non-beta version of the provider between >= 1.2.0 and < 1.3.0. For example, 1.2.X https://www.terraform.io/docs/configuration/modules.html#gt-1-2-0-1